search

epispot / EpiJS

A toolset for analyzing and creating epidemiological models.
https://epi.js.org
GNU General Public License v3.0
5 stars 2 forks source link

[DEP]: Bump mathjs from 11.8.2 to 11.10.1 #292

Closed dependabot[bot] closed 1 year ago

dependabot[bot] commented 1 year ago

Bumps mathjs from 11.8.2 to 11.10.1.

Changelog

Sourced from mathjs's changelog.

2023-08-31, 11.10.1

  • Upgrade to fraction.js@4.3.4, see #3022.
  • Fix #3020: lruQueue using the global hasOwnProperty which may be polluted.
  • Add support for prefixes for the unit erg, and restrict prefixes of the unit joule to only long prefixes like kilo and no short prefixes like k. Thanks @​costerwi.
  • Add a new browser example examples/browser/lorenz.html that uses solveODE and plots the result in a chart. Thanks @​dvd101x.

2023-08-23, 11.10.0

2023-07-24, 11.9.1

  • Fix a security vulnerability in FunctionNode and SymbolNode allowing arbitrary code execution via math.evaluate. Thanks Harry Chen.
  • Fix #3001: mathjs bundle containing new Function(...) (CSP issue).

2023-07-19, 11.9.0

Commits
  • 2a3c99d fix: upgrade to fraction.js@4.3.4
  • c5644f4 chore: publish v11.10.1
  • 69e0872 fix: temporarily lock fraction.js@4.2.0, see #3022
  • e728264 docs: update HISTORY.md
  • 983756a Merge remote-tracking branch 'origin/develop' into develop
  • 856b948 Example for Lorenz attractor (#3018)
  • 2c819ea Merge remote-tracking branch 'origin/develop' into develop
  • 386c280 docs: define see also sections for erf and zeta
  • 49a19ca Energy prefixes (#3019)
  • 7e35dad fix linting issues
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
codecov[bot] commented 1 year ago

Codecov Report

Patch and project coverage have no change.

Comparison is base (67166cc) 99.38% compared to head (b10fb3b) 99.38%.

:exclamation: Current head b10fb3b differs from pull request most recent head f64bd17. Consider uploading reports for the commit f64bd17 to get more accurate results

Additional details and impacted files ```diff @@ Coverage Diff @@ ## main #292 +/- ## ======================================= Coverage 99.38% 99.38% ======================================= Files 6 6 Lines 489 489 ======================================= Hits 486 486 Misses 3 3 ```

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.

dependabot[bot] commented 1 year ago

Superseded by #295.